Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.mft
File: xNjBmFxQx-rUz9jTqT1j5WEfb7Y.mft (raw, json)
Hash identifier: 6sFpMUplSSXMu+FOLenIcDAEQySqL1aqa9LchHhsZ84=
Subject key identifier: 5B:EC:4F:2B:A3:DC:25:2E:C0:A2:B1:F5:42:DB:98:EF:CC:65:4F:F1
Authority key identifier: C4:D8:C1:98:5C:50:C7:EA:D4:CF:D8:D3:A9:3D:63:E5:61:1F:6F:B6
Certificate issuer: /CN=c4d8c1985c50c7ead4cfd8d3a93d63e5611f6fb6
Certificate serial: 019CA9EABCA027A191B65A64E7FA87B9399F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.mft
Manifest number: 1849
Signing time: Sun 01 Mar 2026 15:00:59 +0000
Manifest this update: Sun 01 Mar 2026 15:00:59 +0000
Manifest next update: Mon 02 Mar 2026 15:00:59 +0000
Files and hashes: 1: 7yu1vZA6sQopFbJ477QSAd_T4No.roa (hash: y294/GuVma254ox9Je2JWpyy0Aod0Bh8Uh2WyhLyqks=)
2: AOST2v0fOQI-ty-pWahAGdkHAEs.roa (hash: jxMvz/MnFmWAmclh3cHyqmlZEVpCA/u6934edlXvIDs=)
3: v92-Eaw03d123_02nzbPzAiBgtc.roa (hash: EG21x+MWDXMZMqTlMifEMC9yWAbNwFpO2h6QDrwu7Io=)
4: xNjBmFxQx-rUz9jTqT1j5WEfb7Y.crl (hash: sztGapB4uckdLiE+tKpOGSPcjaJ0w9/sjpTVUkuu62s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:ea:bc:a0:27:a1:91:b6:5a:64:e7:fa:87:b9:39:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4d8c1985c50c7ead4cfd8d3a93d63e5611f6fb6
Validity
Not Before: Mar 1 15:00:59 2026 GMT
Not After : Mar 2 15:00:59 2026 GMT
Subject: CN=5bec4f2ba3dc252ec0a2b1f542db98efcc654ff1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:cc:c1:68:f7:cd:fe:19:42:77:86:5e:b8:ab:
2d:22:b8:05:19:c2:ef:73:71:2e:53:1e:7f:94:c3:
8e:3e:f7:84:76:d6:9e:65:3d:fa:10:34:b7:5c:34:
0a:ed:25:49:a2:5b:ec:a5:fb:e4:fa:61:09:e7:01:
53:86:61:d2:29:2a:26:d5:53:d6:9e:02:84:df:21:
ce:1b:89:1d:c5:71:72:74:0c:3c:e5:46:3f:ea:e3:
2a:cc:68:35:02:0c:3e:23:f8:4b:37:96:34:a3:95:
1f:3b:08:e9:ac:ae:90:cb:f2:77:9e:5a:03:2d:61:
cf:1f:70:cf:05:61:c8:72:e2:a7:3b:d0:99:90:59:
60:47:29:a9:f9:64:b9:b7:f2:ba:6c:0a:d9:53:41:
c9:0e:b5:2b:52:12:52:14:b3:e1:05:4d:cf:8b:4d:
11:f0:10:a8:35:c5:81:b6:eb:9e:d2:67:1e:3d:9f:
b2:af:c2:6c:02:f7:6a:6b:77:f3:27:39:c5:62:30:
8d:5b:21:23:2d:fb:7b:8c:7a:79:bf:09:86:17:36:
b6:60:6f:ee:e8:8d:f6:78:9f:d2:09:e7:53:d9:25:
f6:bf:ab:91:31:ba:58:06:2a:1c:86:19:db:0d:60:
0b:65:bb:d5:8f:d5:65:69:4b:56:dd:1c:11:75:63:
ed:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:EC:4F:2B:A3:DC:25:2E:C0:A2:B1:F5:42:DB:98:EF:CC:65:4F:F1
X509v3 Authority Key Identifier:
keyid:C4:D8:C1:98:5C:50:C7:EA:D4:CF:D8:D3:A9:3D:63:E5:61:1F:6F:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:25:01:d0:50:fb:fd:9e:5a:49:df:e9:4e:66:3c:c7:ea:54:
43:ee:03:da:a5:65:59:d4:92:48:d4:1f:d8:84:fe:56:4c:77:
fe:14:ed:71:43:9f:c9:94:f2:fe:5b:c9:06:e5:b9:93:86:d7:
c4:46:0c:32:6b:62:af:0d:c4:34:c4:78:51:95:5f:77:2b:01:
ae:3a:4d:6f:33:3d:48:2a:f4:b8:75:fe:02:3a:28:18:cf:80:
78:04:58:fc:6a:f7:bc:6b:00:83:d8:63:bc:b5:b5:99:25:9d:
76:27:8b:1d:23:2c:09:a2:28:da:6a:b0:dd:41:cd:ae:4c:d0:
3d:95:74:d6:53:82:92:f7:7d:ce:0b:46:37:5c:4b:28:2b:1f:
12:62:05:31:1a:81:0b:ef:c7:60:3b:b9:4e:7b:cc:f0:82:4a:
87:60:c8:c0:57:74:c8:f6:b8:14:ff:a7:1f:62:54:22:53:52:
52:89:66:06:22:5d:01:d1:1b:11:6d:46:f3:87:66:66:68:49:
fe:89:e2:6e:87:eb:a3:0e:35:0b:e5:6c:e4:f8:ae:21:c4:14:
80:8b:3b:40:e1:63:31:39:4d:d7:96:98:22:97:f8:cc:f3:97:
6a:ff:ca:6b:64:05:e5:08:4c:6e:1e:60:e3:76:b1:c7:46:08:
3c:e8:5c:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:15:30 2026 by rpki-client